Issues

• Read provider responses into pooled buffers

  enhancementfollow-up
  NCodeGroup/Identity#423 · Filter by author polewskm opened on Oct 29, 2026

• Release the BFF refresh lease by ownership

  enhancementfollow-up
  NCodeGroup/Identity#422 · Filter by author polewskm opened on Oct 29, 2026

• BFF interop test against a second OP

  enhancementfollow-up
  NCodeGroup/Identity#419 · Filter by author polewskm opened on Oct 29, 2026

• BFF browser end-to-end suite

  enhancementfollow-up
  NCodeGroup/Identity#418 · Filter by author polewskm opened on Oct 29, 2026

• BFF phase 4

  follow-up
  NCodeGroup/Identity#396 · Filter by author polewskm opened on Oct 29, 2026

• BFF phase 3

  follow-up
  NCodeGroup/Identity#395 · Filter by author polewskm opened on Oct 29, 2026

• ML-KEM key management and composite ML-DSA for JOSE, once standardized

  blocked-externalenhancement
  NCodeGroup/Identity#338 · Filter by author polewskm opened on Oct 27, 2026

• Opt-in ES256K (RFC 8812) package with a secp256k1 curve

  enhancement
  NCodeGroup/Identity#337 · Filter by author polewskm opened on Oct 27, 2026

• ECDH-ES over X25519 and X448 (RFC 8037)

  enhancement
  NCodeGroup/Identity#336 · Filter by author polewskm opened on Oct 27, 2026

• Let ECDH-ES use an ephemeral key of any registered key type

  enhancement
  NCodeGroup/Identity#327 · Filter by author polewskm opened on Oct 27, 2026
  1

• Publish prerelease NuGet packages for the sandbox deployment

  mvptooling
  NCodeGroup/Identity#324 · Filter by author polewskm opened on Oct 27, 2026

• Re-enable the Request Delegate Generator for the Interactive package

  blocked-externaltooling
  NCodeGroup/Identity#186 · Filter by author polewskm opened on Oct 26, 2026

• Publish signed GA NuGet packages from a release tag

  tooling
  NCodeGroup/Identity#184 · Filter by author polewskm opened on Oct 26, 2026

• Post-quantum recovery wrap

  blocked-externalsecrets
  NCodeGroup/Identity#178 · Filter by author polewskm opened on Oct 26, 2026

• Provision the AWS KMS root key and the cluster's access to it

  mvpsecrets
  NCodeGroup/Identity#177 · Filter by author polewskm opened on Oct 26, 2026

• Per-tenant root keys (bring your own key)

  secrets
  NCodeGroup/Identity#174 · Filter by author polewskm opened on Oct 26, 2026

• More root key providers

  secrets
  NCodeGroup/Identity#173 · Filter by author polewskm opened on Oct 26, 2026

• Rewrap and recovery tool

  secrets
  NCodeGroup/Identity#172 · Filter by author polewskm opened on Oct 26, 2026

• Master key rotation, rekey and status

  secrets
  NCodeGroup/Identity#171 · Filter by author polewskm opened on Oct 26, 2026

• Envelope encryption / hardware-backed protection at rest

  mvpsecrets
  NCodeGroup/Identity#167 · Filter by author polewskm opened on Oct 26, 2026

• Key lifecycle / rotation primitives

  secrets
  NCodeGroup/Identity#166 · Filter by author polewskm opened on Oct 26, 2026

• Remote (KMS-resident) signing keys

  secrets
  NCodeGroup/Identity#165 · Filter by author polewskm opened on Oct 26, 2026

• Hash client secrets that only need verifying (needs its own ADR)

  secrets
  NCodeGroup/Identity#163 · Filter by author polewskm opened on Oct 26, 2026

• Serve the management console through the BFF instead of as a browser public client

  frontend
  NCodeGroup/Identity#158 · Filter by author polewskm opened on Oct 26, 2026

• Move pnpm to its current major once Dependabot supports it

  blocked-externalfrontend
  NCodeGroup/Identity#153 · Filter by author polewskm opened on Oct 26, 2026